audit-security

Run a security audit to identify and remediate vulnerabilities, misconfigurations, and risky patterns across your codebase. It enforces multi-category assessments including OWASP coverage, input validation, and data protection, then outputs structured JSONL findings and Markdown reports.

A codebase security audit covers authentication, input validation, data protection, dependencies, OWASP coverage, hosting, framework security, crypto, file handling, and AI/code security patterns. It provides evidence-backed scoring and actionable remediation recommendations for secure deployments.

Yes, you can integrate this security audit into CI pipelines for automated code checks. It supports configurable parallel or sequential execution modes to efficiently analyze repositories with diverse tech stacks during code reviews or on-demand security checks.

Yes, the security audit is applicable to repositories with diverse tech stacks. It performs comprehensive checks across multiple categories including framework security, dependencies, and crypto, generating structured JSONL findings and baselines regardless of the underlying technologies.

The security audit outputs structured results including JSONL findings, a Markdown report, and security baselines. These formats provide evidence-backed scoring and actionable remediation recommendations for documenting and resolving identified vulnerabilities and policy gaps.